This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ZHSNIbMTmdFW7ngBOjLUpvutlw8.roa File: ZHSNIbMTmdFW7ngBOjLUpvutlw8.roa (raw, json) Hash identifier: Tif4RNcgfibj4yYwJLYSXBIwWdmdrt8A5iGbrv0NDoU= Subject key identifier: 64:74:8D:21:B3:13:99:D1:56:EE:78:01:3A:32:D4:A6:FB:AD:97:0F Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019A7E957DDC67334F0CBBD648A9BE409837 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ZHSNIbMTmdFW7ngBOjLUpvutlw8.roa Signing time: Thu 13 Nov 2025 18:58:37 +0000 ROA not before: Thu 13 Nov 2025 18:58:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215728 IP address blocks: 144.31.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 22:06:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7e:95:7d:dc:67:33:4f:0c:bb:d6:48:a9:be:40:98:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Nov 13 18:58:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=64748d21b31399d156ee78013a32d4a6fbad970f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5c:bf:bb:ca:d4:f5:32:e8:0a:a8:67:db:aa: 9f:05:d4:b2:87:b7:db:a0:0b:3c:df:29:ba:00:e5: 7f:96:ee:15:ff:06:df:93:22:59:e4:28:f6:06:93: ab:ee:76:b0:10:1c:d1:79:a5:a2:d6:99:58:44:2f: 62:ff:c0:33:ef:16:db:3c:1a:86:27:0e:e7:2b:11: ad:6e:42:06:82:03:0b:68:09:50:35:6a:6a:ce:29: c3:c4:58:f7:9a:0b:e6:8c:1e:2c:57:d5:c1:26:b7: 45:ee:26:49:b9:d5:a1:48:54:5b:a2:7d:8b:2a:81: b4:06:8c:b9:0e:15:fb:73:08:83:b0:72:19:33:35: 5e:41:46:d3:a3:b4:16:e3:44:c6:a8:f0:1f:7d:12: d4:33:34:94:61:ba:a6:66:9f:d9:26:18:0b:1f:df: 72:d9:b1:b7:32:97:aa:4c:99:b1:7c:89:26:09:b8: 16:14:e7:66:d8:98:8d:54:cf:58:e2:c9:e7:1c:49: 1e:d6:fd:23:e7:db:97:64:63:de:1a:e5:28:79:39: a8:c7:16:09:f4:7b:5a:0a:c8:c3:7d:17:66:fe:23: d5:55:db:1c:6c:c8:cc:90:3d:1b:36:1d:f9:8e:94: fe:60:8c:f9:2b:dc:c8:8f:24:92:42:5f:2f:be:eb: ba:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:74:8D:21:B3:13:99:D1:56:EE:78:01:3A:32:D4:A6:FB:AD:97:0F X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ZHSNIbMTmdFW7ngBOjLUpvutlw8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.31.206.0/24 Signature Algorithm: sha256WithRSAEncryption 58:b7:83:b7:9e:ca:ec:89:68:51:69:0f:29:e5:72:77:68:64: 71:86:48:ea:88:84:7a:c9:9e:16:60:38:30:8d:bc:0c:50:01: dc:67:60:f1:c4:b8:c5:21:e7:55:f3:b2:2b:18:17:65:c9:e0: 1f:f9:0a:6b:9d:96:30:6d:b5:e0:99:8c:36:fd:38:2c:b9:cd: 7c:a1:f4:a2:53:f8:ea:2c:8e:bf:eb:c0:55:c9:d1:45:c2:b7: 62:8c:6e:f6:3f:9c:fd:8c:87:49:33:9d:d1:d1:d8:96:18:6b: 3d:33:e0:ab:28:b7:4e:8b:e3:06:dc:90:04:d2:4a:11:25:59: 62:8e:0b:97:67:7c:50:8b:7c:7a:ee:86:ed:fa:3e:b3:56:e7: 17:5e:e3:ac:1d:64:18:8c:8e:4f:fc:f4:c8:63:9e:8f:dd:62: 12:a9:10:d9:bc:72:fc:c9:cc:0e:d6:c4:be:52:9f:40:5d:95: 00:b3:de:8c:29:fe:81:2b:5d:b4:54:12:7d:47:38:ac:58:7d: 6a:dc:ed:eb:f0:89:d2:a5:b0:7d:1c:21:e9:3c:3f:fa:42:bc: 39:9e:90:df:24:98:cd:76:bf:e5:69:0a:6d:d2:e3:72:9a:94: 83:25:aa:a4:0a:ad:58:fc:71:d2:7d:a3:11:8f:e8:7b:5f:ab: bc:ea:ef:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp+lX3cZzNPDLvWSKm+QJg3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjUxMTEzMTg1ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDc0OGQyMWIzMTM5OWQxNTZlZTc4MDEzYTMyZDRhNmZiYWQ5NzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1y/u8rU9TLoCqhn26qfBdSyh7fb oAs83ym6AOV/lu4V/wbfkyJZ5Cj2BpOr7nawEBzReaWi1plYRC9i/8Az7xbbPBqG Jw7nKxGtbkIGggMLaAlQNWpqzinDxFj3mgvmjB4sV9XBJrdF7iZJudWhSFRbon2L KoG0Boy5DhX7cwiDsHIZMzVeQUbTo7QW40TGqPAffRLUMzSUYbqmZp/ZJhgLH99y 2bG3MpeqTJmxfIkmCbgWFOdm2JiNVM9Y4snnHEke1v0j59uXZGPeGuUoeTmoxxYJ 9HtaCsjDfRdm/iPVVdscbMjMkD0bNh35jpT+YIz5K9zIjySSQl8vvuu6iQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGR0jSGzE5nRVu54AToy1Kb7rZcPMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvWkhTTkliTVRtZEZXN25nQk9qTFVwdnV0bHc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkB/OMA0G CSqGSIb3DQEBCwUAA4IBAQBYt4O3nsrsiWhRaQ8p5XJ3aGRxhkjqiIR6yZ4WYDgw jbwMUAHcZ2DxxLjFIedV87IrGBdlyeAf+QprnZYwbbXgmYw2/Tgsuc18ofSiU/jq LI6/68BVydFFwrdijG72P5z9jIdJM53R0diWGGs9M+CrKLdOi+MG3JAE0koRJVli jguXZ3xQi3x67obt+j6zVucXXuOsHWQYjI5P/PTIY56P3WISqRDZvHL8ycwO1sS+ Up9AXZUAs96MKf6BK120VBJ9RzisWH1q3O3r8InSpbB9HCHpPD/6Qrw5npDfJJjN dr/laQpt0uNympSDJaqkCq1Y/HHSfaMRj+h7X6u86u9f -----END CERTIFICATE-----Generated at Wed Nov 26 03:45:49 2025 by rpki-client